-
**Github username:** --
**Twitter username:** --
**Submission hash (on-chain):** 0xe192f9ab7971ade759bd5402f34a8c444b1416c9b8c59e147213af92ef5943aa
**Severity:** low
**Description:**
**Description**…
-
### Summary
SeaCMS v12.9 suffers from an unauthenticated SQL injection vulnerability in the dmku/index.php file where user-supplied data is used directly in an SQL query without proper sanitization.
…
-
## CVE-2023-40117 - High Severity Vulnerability
Vulnerable Library - baseandroid-10.0.0_r34
Android framework classes and services
Library home page: https://android.googlesource.com/platform/frame…
-
## CVE-2023-21240 - Medium Severity Vulnerability
Vulnerable Library - baseandroid-10.0.0_r34
Android framework classes and services
Library home page: https://android.googlesource.com/platform/fra…
-
**Github username:** @0xbrett8571
**Twitter username:** 0xbrett8571
**Submission hash (on-chain):** 0xd98c4d81f30a950aed79ac21aeb951f280b963ee8f96f9da7b34eb9714f0557d
**Severity:** high
**Descriptio…
-
This is a follow-up after discussions in CVE QWG meeting on the topic of being able to publish as an Authorized Data Provider (ADP) into CVE's current JSON schema. CERT/CC Stakeholder Specific Vulner…
-
Hi team,
A malicious policyfile in XML passed to veraPDF CLI can lead to a XXE vulnerability exploitation due to insecure use of XML parser. The policyfile be the attack payload, which is similar …
-
Vulnerable Library - ts-proto-1.164.1.tgz
Path to dependency file: /src/frontend/package.json
Path to vulnerable library: /src/paymentservice/package.json,/src/frontend/package.json
Found in HEA…
-
### **Summary**
There is a significant Stored Cross-Site Scripting (XSS) vulnerability identified in dzzoffice 2.02.1 SC UTF8. This vulnerability allows the upload of XML files through Ueditor's uplo…
-
## CVE-2023-20920 - High Severity Vulnerability
Vulnerable Libraries - baseandroid-10.0.0_r34, baseandroid-10.0.0_r34
Vulnerability Details
In queue of UsbRequest.java, there is a possib…